Users I just noticed something this morning that may be a big problem if I understand the Razor principle. Since Tuesday razor has been tagging some of the sobig.f infected messages and it is blocking the sender, RIGHT?. Well since this is not the actual sender now problems are popping up. Heck I might be on the blocked list running Linux and obviously not infected. If this is a case we need a fix bad.
Razor does NOT block senders.. ever.. it does not work by tracking email addresses. In fact, it ignores all headers entirely. Razor needs to do this since spammers usually change from: addresses quite rapidly, and often use a from: address that is someone they want to extract some revenge against (joe-jobbing).
Razor tracks the message bodies themselves, so anyone sending a message that has one or more of the the exact same mime sections as a sobig.f will get tagged by razor.
So razor will tag sobig sent by anyone, but it won't penalize anyone that has appeared to "send" sobig before, because it never tracks headers, including From:.
------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Razor-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/razor-users
